ssl-certificate-center.thawte.de

- Thawte, Inc. -

Issued by thawte EV SSL CA - G3

About this certificate

This digital certificate with serial number 3d:86:e6:08:75:b6:ab:1c:5f:86:1c:72:f1:94:66:40 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Thawte, Inc.

Company registration number: 3898261
Organization: Thawte, Inc.
Organization unit: Infrastructure Operations
State / Province: California
Locality: Mountain View
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:86:e6:08:75:b6:ab:1c:5f:86:1c:72:f1:94:66:40
Serial Number (int): 81783341146388253843995386485646059072
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: f0:70:51:da:d3:2a:91:4f:52:77:d7:86:77:74:0f:ce:71:1a:6c:22

Fingerprint (sha1): 18:ab:52:82:e0:88:65:c3:9a:1e:29:cb:18:63:e1:21:11:d3:20:ba
Fingerprint (sha256): 78:71:b3:13:13:ce:c6:03:4f:e2:ef:1c:95:de:d1:16:4d:18:82:66:af:8f:3c:61:2f:fe:4a:d8:9c:0d:fd:24

Issuing Certificate URL: http://ti.symcb.com/ti.crt

Revocation information

OCSP Server: http://ti.symcd.com
CRL Distribution Point: http://ti.symcb.com/ti.crl

Check the revocation status for certificate ssl-certificate-center.thawte.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-certificate-center.thawte.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl-certificate-center.thawte.de

Other certificates including the domain name thawte.de

(limited to 100 certificates)
kb-thawte-de.symantec.com
pilot-ssl-certificate-center-enterprise.thawte.de
pilot-ssl-certificate-center-enterprise.thawte.de
thawte.de
ssl-certificate-center.thawte.de
www.thawte.de
ssl-certificate-center.thawte.de
ssl-certificate-center-enterprise.thawte.de
ssl-certificate-center.thawte.de
digicert.com
www.thawte.de
search.thawte.de
search.thawte.de
www.thawte.de
ssl-certificate-center.thawte.de
ssl-certificate-center.thawte.de
pilot-ssl-certificate-center-enterprise.thawte.de
www.thawte.de
www.thawte.de
SSL-CERTIFICATE-CENTER.THAWTE.DE
thawte.com
www.thawte.de
pilot-ssl-certificate-center.thawte.de
digicert.com
www.thawte.de
pilot-ssl-certificate-center.thawte.de
kb-thawte-de.symantec.com
ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net
search-thawte-de.symantec.com
pilot-ssl-certificate-center-enterprise.thawte.de
kb-thawte-de.symantec.com
pilot-ssl-certificate-center-enterprise.thawte.de
search.thawte.de
ssl-certificate-center.thawte.de
ssl-certificate-center.thawte.de
SSL-CERTIFICATE-CENTER.THAWTE.DE
digicert.com
ssl-certificate-center.thawte.de
www.thawte.de
ssl-certificate-center-enterprise.thawte.de
digicert.com
pilot-ssl-certificate-center.thawte.de
digicert.com
pilot-ssl-certificate-center.thawte.de
thawte.de
www.thawte.de
pilot-ssl-certificate-center.thawte.de
digicert.com
pilot-ssl-certificate-center.thawte.de
pilot-ssl-certificate-center-enterprise.thawte.de
pilot-ssl-certificate-center-enterprise.thawte.de
SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.DE
pilot-ssl-certificate-center.thawte.de
search-thawte-de.symantec.com
ssl-certificate-center.thawte.de
thawte.com
search.thawte.de

Certificate

The complete raw certificate details for ssl-certificate-center.thawte.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuleyCcfLb7+38U2kDd9c
M7DNvTCinhnjWuxS8EXKoytwc9g4u8e3r3kMGxxxGRlZYYOz3YzAWwIFKw6XZvL3
r9HZu3FQq3Lv4eQYXcAHRpq/U12vbYjGEr1MDXwa1IKBgqeTjji8J9o48C6rE/XL
z6YXX7ah05SZq4DHsEN8hd0YP950xPHgmt3Z4VcoZciLfAt5RQqBWvtQB9D0hP0l
PYQ7TRZ/4IkQqfQG1ER9QE1A7GpN2qm1Q0EHBGy2wFwwaC4Zhd2Wk0x6mA3+vWCV
Z224DE9o25I4N4hauxxuJGfSQOnJwua//zBmlNeRoVMUIl9KUdRSPudF++6QnYz2
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 81783341146388253843995386485646059072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3898261'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Infrastructure Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ssl-certificate-center.thawte.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23523568967604851897986845850440383572255606589931700037426004244218431933420612558444899542381883360430906517578953739708625176779795715887750435726147076372012050375698565424015259434699218073468558939307495360171653491806547040138903092680935265985038971847224016061123520706479381664366165587973876710767814858444982130146798346581750385612151017072928575813281601932590649053139227513707299748320461319187195818043049978354410818012979997853018608868469349558275385289517251208136587385582675343477573746408673982958676869824226802342955697499185701893676762504369186189600667824708714939685289529343476492989991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-certificate-center.thawte.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f07051dad32a914f5277d78677740fce711a6c22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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